Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: bvKNAJfSEgUYPC2msDfpUDo2tFgweUUKskk28K3S7eM=
Subject key identifier: CB:2B:2D:24:69:C3:11:E2:29:74:0F:5D:90:06:D7:0B:C2:BA:71:53
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 0197B70EFD959F3890D559FEF0662F0793ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 0B7E
Signing time: Sat 28 Jun 2025 15:01:42 +0000
Manifest this update: Sat 28 Jun 2025 15:01:42 +0000
Manifest next update: Sun 29 Jun 2025 15:01:42 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: EeugmUwRdWndlaNRiStD+UEsAuLaLHi/B650Fusljuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fd:95:9f:38:90:d5:59:fe:f0:66:2f:07:93:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Jun 28 15:01:42 2025 GMT
Not After : Jun 29 15:01:42 2025 GMT
Subject: CN=cb2b2d2469c311e229740f5d9006d70bc2ba7153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:68:48:12:3b:b6:a4:63:47:08:93:cb:b3:
27:9a:d6:c4:31:33:ff:03:f6:b4:fc:51:1e:ac:a3:
10:22:0a:72:2d:12:c7:b8:3e:3d:78:b8:d0:d5:24:
33:4c:2a:2f:e7:2d:59:72:90:96:d1:f4:3d:60:af:
f6:d1:37:05:11:c3:4c:65:14:c7:b6:ec:a0:25:4e:
d6:78:c0:49:64:1c:82:2f:2e:54:b6:df:59:a2:f2:
0c:79:87:19:52:57:29:f3:ba:f4:3a:eb:26:07:cc:
9a:94:f2:8b:9a:d5:18:34:fe:70:29:b5:e6:9b:37:
70:da:5b:e6:4c:bd:cc:78:5a:0c:f5:aa:44:b2:94:
69:12:76:a1:8d:24:8e:2a:e3:fd:e0:b5:19:a4:e2:
49:d6:c2:03:34:f8:50:c3:87:08:52:9e:47:be:26:
f7:dc:b4:8a:88:a0:1d:3e:8b:79:c7:8a:b5:cf:96:
06:30:b7:ed:77:47:62:df:26:69:19:71:2c:8d:fc:
05:11:4f:5b:22:1f:5e:83:72:4e:55:1a:0f:ee:5b:
e0:7c:f5:2e:f0:04:17:b8:71:cf:2f:6b:38:56:5d:
ca:a3:f8:38:bf:d3:f3:6c:f7:39:50:79:a7:54:05:
23:a9:d7:1c:cb:78:42:ae:c7:8f:ae:a7:25:26:04:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:2D:24:69:C3:11:E2:29:74:0F:5D:90:06:D7:0B:C2:BA:71:53
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cd:44:8e:33:1f:ca:88:6c:71:e5:74:54:d9:ba:69:b8:6e:
98:93:d4:bc:ce:f7:9d:52:9b:88:95:a8:32:5b:3f:13:e2:c7:
86:63:bc:ae:24:84:a0:18:c9:c3:24:11:51:6d:39:50:2d:88:
22:21:bb:3e:a9:74:f4:55:1e:a2:ea:bb:0b:db:ad:9c:cd:17:
25:fc:ca:53:0d:98:06:8c:9a:0c:63:27:01:a9:71:4f:a8:dd:
13:ba:72:ee:17:8b:8a:81:b2:47:97:b4:ed:56:79:66:38:71:
55:aa:39:46:71:9c:a7:1c:70:d3:47:3e:bc:c9:60:24:5f:c6:
71:78:f2:63:68:8b:0b:92:56:37:45:5f:22:ac:36:0a:25:cd:
3e:6d:f1:85:4e:1e:dd:e0:4d:7a:78:41:2a:6e:5b:6d:a8:aa:
3c:7d:8b:3a:c5:fc:75:1c:e1:2a:8a:5a:fc:d8:f9:f1:4a:78:
36:ed:11:b5:0d:1e:65:d8:6a:38:d3:d1:15:2e:28:e1:cb:d8:
17:06:21:a5:71:fe:43:1f:1d:26:80:a9:14:1f:19:e0:68:70:
35:50:57:58:37:17:26:4e:28:f0:f7:3c:70:ce:01:38:a1:42:
29:f6:28:dd:74:80:63:05:d7:08:81:ac:cb:7c:e5:8f:1c:e4:
a5:c5:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:22 2025 by rpki-client